Alicloud Ai Video Wan R2v

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Alibaba Cloud video-generation helper, with expected notes around installing the SDK, using an API key, sending media to the provider, and saving local output files.

Before installing, confirm you are comfortable using an Alibaba Cloud/DashScope API key, sending the selected reference media to Alibaba Cloud, installing the DashScope SDK in a virtual environment, and retaining request/output files under the skill's output directory.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A configured API key could be used to submit generation tasks against the user's Alibaba Cloud account.

Why it was flagged

The skill requires an Alibaba Cloud/DashScope credential for its provider workflow. This is expected for the stated purpose, but it gives access to a cloud account and may incur provider charges.

Skill content
- Set `DASHSCOPE_API_KEY` in your environment, or add `dashscope_api_key` to `~/.alibabacloud/credentials`.
Recommendation

Use a dedicated limited-scope key if available, monitor provider costs, and do not paste credentials into prompts or output files.

What this means

Installing an unpinned dependency can change what code is installed over time.

Why it was flagged

The prerequisite installs the third-party DashScope SDK. It is user-directed and purpose-aligned, but the package version is not pinned.

Skill content
python -m pip install dashscope
Recommendation

Install it in the virtual environment as shown, verify the package source, and consider pinning a known-good version for repeatable use.

What this means

Prompts and reference video or image material may be sent to Alibaba Cloud for processing.

Why it was flagged

The skill is designed to use an external cloud provider with user-supplied reference media. This is disclosed and purpose-aligned, but it creates an external data-sharing boundary.

Skill content
description: Generate reference-based videos with Alibaba Cloud Model Studio Wan R2V models ... `reference_video` (string | bytes, required)
Recommendation

Only submit media you are allowed to upload, and review Alibaba Cloud's data handling terms for sensitive or proprietary content.

What this means

Sensitive prompts, reference metadata, or generated-video links could remain on disk after use.

Why it was flagged

The skill intentionally persists request and result artifacts locally. These files may contain prompts, media references, task IDs, or video URLs.

Skill content
- Save reference input metadata, request payloads, and task outputs in `output/alicloud-ai-video-wan-r2v/`.
- Keep at least one polling result snapshot.
Recommendation

Review and clean the output directory when finished, and avoid storing secrets or private media URLs in request payloads.